What to do if your website goes down or gets hacked
It is an uneasy feeling when your website will not load, or when a page looks like someone else has taken it over. If you run a small business in Buda, Kyle, Austin, or San Antonio, you may not have a technical team standing by. You still have things you can do in the first hour that will help, and a few things you should avoid. This is a practical walk through those steps, not a promise that every situation will be simple.
First, confirm what is actually wrong
Open the site on your phone using cellular data, not only on the same Wi-Fi you always use. Try a second browser, and if you can, ask someone in another place to try it too. Sometimes the problem is a local connection, a cached page, or a single device. If only one page fails, write down the exact address and the message you see. If the whole site fails, note whether you get a timeout, a hosting error page, a certificate warning, or a page that is clearly not yours.
It also helps to check whether you can still sign in to your hosting account, your domain registrar, and the site’s own editor (WordPress, Squarespace, Wix, Shopify, GoDaddy Website Builder, or whatever you use). If those logins work, you have more options. If they do not, you may be dealing with a password problem, an expired card on the hosting account, or something that needs the host’s help.
If the site is down
Look at your hosting dashboard and any status notices from your host. The cause is sometimes on their side, and sometimes it is an unpaid invoice, an expired domain, or a plan limit. Those are ordinary problems, and they are easier to fix once you know which one it is. If you have email at the same domain, check whether email is still working. That can be a clue about whether the issue is the website, the domain, or something broader.
If you work with a person who cares for the site, contact them with what you have already observed: when you first noticed it, what you see, and whether logins still work. Clear notes save time. If you do not have someone, the hosting support team is the next call, especially if the dashboard shows an error you do not recognize.
Avoid random “fix your site” offers that appear in search results or in your inbox at the same moment the site goes down. Some of those offers are legitimate freelancers. Some are not. Start with the companies and people you already have a relationship with: your host, your registrar, and anyone who already has authorized access to the site.
If you think the site was hacked
Signs can include a page you did not publish, strange links, a sudden redirect to another site, new admin users you did not create, or a warning from a browser or from Google. Do not ignore it, and do not pay anyone who demands money to “unlock” the site or keep it from being damaged. That is not a real support process.
Change the passwords for the site, the hosting account, the domain registrar, and the email that controls those accounts, using a device you trust. If you use the same password in more than one of those places, change all of them, and stop reusing that password. If anyone else has access, talk to them before you lock them out of work they are supposed to be doing, but do not leave default or shared passwords in place.
If you have a current backup from before the problem started, restoring from that backup is often the cleanest first repair. After a restore, update the software, review users and plugins or apps, and look at the key pages. If the backup is old, or if the problem returns, you may need more cleanup than a restore can provide. That work should be done by someone who knows the platform.
If customer information could have been involved, take that seriously and get advice that fits your situation. Do not guess in public about what was or was not accessed. Stick to what you know, and to the next step you are taking to fix the site.
How we handle this for clients
If you are on one of our website care plans, call or message us and we will look at it right away and prioritize it. Every plan includes weekly backups and uptime and security monitoring, so our first step is usually restoring from backup. Cleanup work beyond restoring from backup is billed as extra time at $85 an hour, in 30-minute increments. We do not quote a guaranteed restore time, and we do not claim a particular uptime percentage. We will tell you what we see and what we can do.
If you are not a client, you can still call us at (737) 304-7709 or send a note. We can tell you honestly whether we are in a position to help, or if your host is the better first call. We will not invent a capability we do not have.
A few habits that make a bad day less bad
You cannot prevent every outage. You can make the next one easier. Keep a current backup you know how to reach, or work with someone who handles backups for you. Keep software, themes, plugins, and apps updated, with a check of the site afterward. Use unique passwords and keep the list of people with admin access short. Know where the site is hosted, where the domain is registered, and which email address controls those accounts.
Write those details down somewhere other than the website itself. When the site is down, that is a poor moment to realize the only copy of the hosting login was stored there.